Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

WinFixer-WinAntiSpyware problem-other assorted pop

loophole

Posted 14 October 2005 - 08:42 AM

loophole

Malware Expert

Retired Staff

9,798 posts

Delete everything in your recycle bin. That is all the scan picked up. I dont know why norton wont detect and stop this thing. I assume it is up to date.I have spoken with some experts and they agree there is nothing wrong with your log. I normally wont recommend beta products but I have used this one for a while and I think its great Microsoft antispyware .I would download it and install it and see if this can prevent this . I have had people who were reinfected with this come back once but nothing like this

Advertisements

silvermine

Posted 14 October 2005 - 12:18 PM

I emptied the recycle last night after I ran the Panda scan. However, I did get one media fastclick popup after that fix. I will definately download the program you recommend.

Two more questions: Did you ever get an answer to my mixed up typing problem? (It's a Dell laptop.)Also, is my other thread still on your agenda?Thank you SOOO much for your help with this problem. I'll let you know how things are.

silvermine

Posted 15 October 2005 - 01:08 PM

loophole

Posted 16 October 2005 - 05:58 PM

loophole

Malware Expert

Retired Staff

9,798 posts

Silvermine. If it makes you fell any better I get a media fastclick popup every once in a while. These are site based pop ups( actually they are pop unders) However They dont actually show on my screen just in the taskbar. And I can't actually See the popup when I open it, it just shows me a white screen because spywareblaster would catch it and I would be restricted from it. The popup you recieved while on this site was after you were reinfected with our friend. This only happens to me when I vary to different sites than I normally go. For instance I would go to a weather site every once in a while while the hurricanes were coming and I would almost always get one media. fast popup there.

Open spywareblaster and check for updates then click on enable all protection

This seems like a bad website that keeps infecting you. Let me know if this helps. We have a few other options to try that are a little more time consuming if it doesn't

After the files are extracted, please reboot your computer into Safe Mode. You can do this by restarting your computer and continually tapping the F8 key until a menu appears. Use your up arrow key to highlight Safe Mode then hit enter.

Once in safe mode open the VundoFix folder and doubleclick on KillVundo.bat

You will first be presented with a warning.
It should look like this

VundoFix V2.15 by Atri
By using VundoFix you agree that you are doing so at your own risk
Press enter to continue....

At this point press enter one time.

Next you will see:

Please Type in the filepath as instructed by the forum staff
and then press enter:

At this point please type the following file path (make sure to enter it exactly as below!):

C:\WINDOWS\system32\byxyw.dll

Press Enter to continue with the fix.

Next you will see:

Please type in the second filepath as instructed by the forum
staff then press enter:

At this point please type the following file path (make sure to enter it exactly as below!):C:\WINDOWS\system32\wyxyb.*

Press Enter to continue with the fix.

The fix will run then HijackThis will open, if it does not open automatically please open it manually.

Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu).Set the program up as follows:Click "Options..."Move the arrow down to "Custom CleanUp!"Put a check next to the following (Make sure nothing else is checked!):

loophole

Posted 27 October 2005 - 09:07 PM

loophole

Malware Expert

Retired Staff

9,798 posts

I took it off for some reoson ...really dont know why. I hope the repair solves that annoying issue. Maybe it will solve this one too. Im here to help you until you tell me to close the thread...just to let you know

loophole

Posted 27 October 2005 - 11:47 PM

loophole

Malware Expert

Retired Staff

9,798 posts

Here we go

Now open pocketkillbox Select the option "Delete on reboot".Now highlight and 'copy' (Ctrl + C) the entire list of filepaths below:Click 'File' on the killbox menu at the top and choose 'Paste from clipboard'The entire list should now be in the "Full Path of File to Delete" field.To check, click on the dropdown-arrow next to that field.If you expand it, these lines should all be there

After the files are extracted, please reboot your computer into Safe Mode. You can do this by restarting your computer and continually tapping the F8 key until a menu appears. Use your up arrow key to highlight Safe Mode then hit enter.

Once in safe mode open the VundoFix folder and doubleclick on KillVundo.bat

You will first be presented with a warning.
It should look like this

VundoFix V2.15 by Atri
By using VundoFix you agree that you are doing so at your own risk
Press enter to continue....

At this point press enter one time.

Next you will see:

Please Type in the filepath as instructed by the forum staff
and then press enter:

At this point please type the following file path (make sure to enter it exactly as below!):

C:\WINDOWS\system32\cbawx.dll

Press Enter to continue with the fix.

Next you will see:

Please type in the second filepath as instructed by the forum
staff then press enter:

At this point please type the following file path (make sure to enter it exactly as below!):C:\WINDOWS\system32\xwabc.*

Press Enter to continue with the fix.

The fix will run then HijackThis will open, if it does not open automatically please open it manually.

Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu).Set the program up as follows:Click "Options..."Move the arrow down to "Custom CleanUp!"Put a check next to the following (Make sure nothing else is checked!):

Then open c:\WinPFind and double-click on WinPFind.exe. When the program is open, click on the Start Scan button to start scanning your computer. Be patient as this scan may take a while. When it is done, it will show a log and tell you the scan is completed. Reboot your computer back to normal mode and and post the contents of c:\WinPFind\WinPFind.txt as a reply to this topic.